new intercept flow

[Tom Zeller]

On Thu, Jun 4, 2015 at 12:27 PM, Liam Hoekenga <liamr at umich.edu> wrote:
> Ok, I found the stuff in conf/intercept/profile-intercept.xml.  Now I'm
> getting...
>
> 2015-06-04 13:10:14,698 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught
> runtime exception
> java.lang.IllegalArgumentException: Cannot find state with id
> 'FriendCheckDenied' in flow 'intercept' -- Known state ids are
> 'array<String>['SelectInterceptFlow', 'CallInterceptFlow',
> 'WriteResultToStorage', 'proceed', 'InvalidProfileContext',
> 'MessageExpired', 'MessageReplay', 'MessageAuthenticationError',
> 'AttributeReleaseRejected', 'TermsRejected', 'ContextCheckDenied',
> 'RuntimeException', 'LogRuntimeException']'
> at org.springframework.webflow.engine.Flow.getStateInstance(Flow.java:342)
>
> This flow is a copy of context-check.
> I see where FriendCheckDenied is referenced in
> flows/intercept/friend-check/friend-check-flow.xml
> I see where ContextCheckDenied is defined in
> system/flows/intercept/intercept-abstract-flow.xml
>
> The stuff in system is supposed to be off limits, right?  Where should add
> the end-state definition for "FriendCheckDenied"?  I tried adding it to
> friend-check-flow.xml, but it didn't do anything.

Add

 <end-state id="FriendCheckDenied" />

to conf/intercept/intercept-events-flow.xml.

And see conf/errors.xml and messages/error-messages.properties to
define a local error and message.

Apologies to all for not having the profile intercept doc done.